Loading story…
F5 issued product advisories covering two separate third-party vulnerabilities affecting components used in its ecosystem: Linux kernel flaw CVE-2021-35477 and curl flaw CVE-2025-14017. The notices were published through F5's security advisory portal and indicate vendor tracking of upstream issues that may affect deployed F5 products or supporting software stacks.
The advisories identify the affected technologies rather than providing public synopsis details, signaling that customers should review the linked F5 notices for product impact, fixed versions, and mitigation guidance. For defenders, the immediate priority is to inventory F5 assets that rely on the Linux kernel or curl, validate exposure against the advisory details, and schedule remediation or compensating controls where applicable.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
F5 issued a product advisory for the curl vulnerability CVE-2025-14017. The reference does not include a synopsis or further technical details.
F5 issued a product advisory بشأن the Linux kernel vulnerability CVE-2021-35477. The reference provides no additional synopsis or impact details.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
F5 published product advisories covering two separate upstream security flaws affecting widely used core components: **Linux kernel** vulnerability `CVE-2025-40154` and **OpenSSL** vulnerability `CVE-2025-68160`. The notices indicate vendor tracking and assessment activity for vulnerabilities in foundational software commonly embedded in network, application delivery, and security appliances. The advisories were released through F5's product advisory channel under knowledge base articles `K000160420` and `K000160552`. While the referenced notices provide limited public synopsis text, the combined updates show F5 alerting customers to potential product impact from both an operating system kernel issue and a cryptographic library flaw, signaling the need for customers to review affected-product guidance and remediation information as it becomes available.
Jun 29, 2026
F5 published product advisories addressing two OpenSSL vulnerabilities, **`CVE-2026-22795`** and **`CVE-2025-69421`**, through notices **`K000160555`** and **`K000160554`**. The advisories indicate that F5 is tracking the impact of both flaws on its product portfolio and has released official guidance for customers through its support portal. While the advisories provided no public synopsis in the referenced material, the paired notices show coordinated disclosure and vendor response around multiple OpenSSL issues that could affect enterprise deployments relying on F5 products. Security teams using F5 platforms should review the vendor bulletins, determine product exposure, and apply any recommended mitigations or updates tied to **OpenSSL** components.
Jun 29, 2026
F5 published product advisories addressing two OpenSSL vulnerabilities, **CVE-2025-69420** and **CVE-2026-22796**, indicating potential impact to products that rely on the widely used cryptographic library. The advisories were released through F5's product security channel and identify the flaws as OpenSSL-related issues requiring customer review of affected product guidance. The notices provide separate tracking for each vulnerability, signaling that organizations using F5 platforms should determine whether deployed versions include affected OpenSSL components and apply vendor-recommended updates or mitigations. Security teams should prioritize asset inventory and patch validation for internet-facing and security-sensitive systems where OpenSSL exposure could increase operational risk.
Jun 29, 2026